Jump to content

"Your copy of Windows is not genuine"


Comprev

Recommended Posts

Hello everybody,

About a month and a half ago I experienced BSOD issues and took the computer to a local tech store to get it fixed. My hard drive got replaced (before BSOD I had 2 drives listed in My Computer, and after the repair I had one). Everything was fine and dandy for a few weeks until, yesterday, I saw this:

Dw82K.png

I also started getting similar notifications from the taskbar and, a few minutes ago, a popup. I'll post more screenshots if necessary.

Is this malware, or is this completely legit and the tech store gave me a pirated windows?

Thanks!

Link to post
Share on other sites

looks legit to me .

it may be possible that the original key/certification was corrupted during the infection/repair .

you could try going though the steps to re-enter the activation code that should be attached to your comp (especially a factory machine) .

you may have to go around with MS ... explain what happened .

you could take the machine back to the shop ... it may have been an oversight on their part .

but ... i would think that the warning would have come up sooner than you noticed ... windows is a bit "naggy" about this (ie : fresh install that is not activated) .

maybe a couple of the others here have some ideas too .

Link to post
Share on other sites

6.1.7600 is Windows 7 with no service pack

6.1.7601 Windows 7 Service pack 1

shed some light on this situation

MGADiag

  • Please download MGADiag and save it to your desktop.
  • Double click the dmjdiag.png icon on your desktop.
  • Push dmjcontinue.png
  • Push dmjcopy.png
  • Go to Start -> Run and type in "Notepad"
  • Go to Edit -> Paste in notepad.
  • x out all of the numbers and letters in the line beginning with "Windows Product Key:"
  • Copy and paste that log here.

WVCheck

Please download WVCheck from Artellos.com.

  • Double click WVCheck.exe. (If you downloaded the zipped version you will need to extract it.)
  • As indicated by the prompt, This program can take a while depending on your hard drive space.
  • Once the program is done, copy the contents of the notepad file as a reply.

CKScanner

Please download CKScanner by askey127 from here

Save it to your desktop.

  • Doubleclick CKScanner.exe and click Search For Files.
  • After a very short time, when the cursor hourglass disappears, click Save List To File.
  • A message box will verify that the file is saved.
  • Double-click the CKFiles.txt icon on your desktop and copy/paste the contents in your next reply.

Security Check

Download Security Check by screen317 from here

  • Save it to your Desktop.
  • Double click SecurityCheck.exe and follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

Link to post
Share on other sites

  • 1 month later...

Here are the logs. Sorry it was a little late.

Results of screen317's Security Check version 0.99.25

Windows 7 x86 (UAC is enabled)

Internet Explorer 9

``````````````````````````````

Antivirus/Firewall Check:

Windows Firewall Enabled!

avast! Free Antivirus

WMI entry may not exist for antivirus; attempting automatic update.

```````````````````````````````

Anti-malware/Other Utilities Check:

Malwarebytes' Anti-Malware

Java 6 Update 26

Out of date Java installed!

Adobe Flash Player ( 10.3.183.7) Flash Player Out of Date!

Adobe Reader X (10.1.1)

Mozilla Firefox (7.0.1) Firefox Out of Date!

````````````````````````````````

Process Check:

objlist.exe by Laurent

Malwarebytes' Anti-Malware mbamservice.exe

Malwarebytes' Anti-Malware mbamgui.exe

AVAST Software Avast AvastSvc.exe

AVAST Software Avast AvastUI.exe

``````````End of Log````````````

Windows Validation Check

Version: 1.9.12.5

Log Created On: 1650_10-10-2011

-----------------------

Windows Information

-----------------------

Windows Version: Windows 7

Windows Mode: Normal

Systemroot Path: C:\Windows

WVCheck's Auto Update Check

-----------------------

Auto-Update Option: Download updates and install them automatically.

-----------------------

Last Success Time for Update Detection: 2011-10-10 20:48:41

Last Success Time for Update Download: 2011-10-08 15:04:44

Last Success Time for Update Installation: 2011-10-08 15:07:16

WVCheck's Registry Check Check

-----------------------

Antiwpa: Not Found

-----------------------

Chew7Hale: Not Found

-----------------------

WVCheck's File Dump

-----------------------

C:\Windows\SoftwareDistribution\Download\18e2c83e42cc8f0cc17b5dbfaf982690\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7601.17514_none_0158f3ee01978c1f\slwga.dll

Size: 14336 bytes

Creation; 5/9/2011 11:11:20

Modification; 20/11/2010 7:21:24

MD5; 19f75d71e4256f5113d64ce2bb66b838

Matched: slwga.dll

-----------------------

C:\Windows\System32\slwga.dll

Size: 14336 bytes

Creation; 3/9/2011 10:41:44

Modification; 21/12/2010 0:38:16

MD5; 2008845b41d561fb77b77bbe0045099e

Matched: slwga.dll

-----------------------

C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16385_none_ff27e02604a90885\slwga.dll

Size: 13824 bytes

Creation; 13/7/2009 19:36:22

Modification; 13/7/2009 21:16:15

MD5; 01fe4bdd0b47a7d8bf34d78d2bc23ddb

Matched: slwga.dll

-----------------------

C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.16723_none_ff66c6b2047a22cd\slwga.dll

Size: 14336 bytes

Creation; 3/9/2011 10:41:44

Modification; 21/12/2010 0:38:16

MD5; 2008845b41d561fb77b77bbe0045099e

Matched: slwga.dll

-----------------------

C:\Windows\winsxs\x86_microsoft-windows-security-spp-wga_31bf3856ad364e35_6.1.7600.20862_none_ffc423831db91904\slwga.dll

Size: 14336 bytes

Creation; 3/9/2011 10:41:44

Modification; 21/12/2010 0:29:6

MD5; 2332de32759ebcc691850e092b2564a6

Matched: slwga.dll

-----------------------

WVCheck's Dir Dump

-----------------------

WVCheck found no known bad directories.

WVCheck's Missing File Check

-----------------------

WVCheck found no missing Windows files.

WVCheck's MBAM Quarantine Check

-----------------------

There were no bad files quarantined by MBAM.

WVCheck's HOSTS File Check

-----------------------

WVCheck found no bad lines in the hosts file.

WVCheck's MD5 Check

EXPERIMENTAL!!

-----------------------

user32.dll - 34b7e222e81fafa885f0c5f2cfa56861

-------- End of File, program close at 1657_10-10-2011 --------

Windows Product Key: *****-*****-V9488-FGM44-2C9T3

Windows Product Key Hash: rmk1OjF0iZq7gQoRmEcpnJHr0oc=

Link to post
Share on other sites

This is legit. I've seen this exact same thing on my 7 pro netbook. It's very possible they gave you a counterfeit one. If this can't be solved here I recommend going back to the shop and telling them they gave you a counterfeit copy of Windows and ask them what they will do about it. If all else fails report it to Microsoft.

http://www.microsoft.com/piracy/reporting/default.aspx

Link to post
Share on other sites

should tell you whether or not its genuine, have you tried the validation site?

  1. run System File Check Instructions Here
  2. then install this update if its not all ready installed kb971033
  3. then visit Microsoft's Validation Site & see if it validates
  4. run Windows Update and install all available updates

if it doesn't validate the first time

  • run Windows Update and install all available updates
  • then visit Microsoft's Validation Site & try again to see if it validates

let us know how it goes, you might have to perform a repair install. If this something you don't feel comfortable doing or if you no longer have the original installation media you should take it back in and have them fix it. If you still have any warranty from the shop I'd make them deal with it since they caused it.

Link to post
Share on other sites

I had this screen to appear on me before, after I had to recover from a backup that was over 1 year old. When I bought the PC, I cleaned all of the unwanted "crapware" from it, did a full scan with both ESET NOD32 & MBAM, defragged the drive & created a separate data partition. Then in case I needed it in the future, I'd have a clean backup to recover with.

Yes, it happened to me, but once I updated the OS & rebooted, all was fine. If that doesn't remedy the situation, w/o delay, contact the shop that did the work for you. If you paid for a reinstall, it's supposed to genuine Windows. Nothing less. Sometimes these "shops" aren't always honest, or they're buying their OS's from unreliable sources, such as online auctions.

One last thing, do you have the reinstall discs that either were supplied by the OEM, or like in my case, I had to burn my own? These discs has the original software that was shipped with your computer, and should work, as long as there was no MOBO swap. Any other parts can be changed at any time, except that one part. And even then, MS will sometimes give you a new activation code upon request, as long as you're cooperative with the rep that you speak with.

Best of Luck,

Cat

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.